CompTIA N10-008 Online Practice Questions and Exam Preparation

CompTIA N10-008 Online Questions & Answers

• Question 941:

  A network technician discovered multiple failed logins on a production server. Upon investigation, the technician determined that a client plugged a personal laptop in to the corporate LAN, which allowed malware on the laptop to probe the network. Which of the following would have prevented this unauthorized device?

  A. Port security
  B. Bring your own device policy
  C. Patch management
  D. Changing default passwords
  A. Port security

• Question 942:

  Which of the following describes when an active exploit is used to gain access to a network?

  A. Penetration testing
  B. Vulnerability testing
  C. Risk assessment
  D. Posture assessment
  E. Baseline testing
  A. Penetration testing

  ---

  Explanation/Reference:

  Penetration testing is a type of security testing that is used to assess the security of a system or network by actively exploiting known vulnerabilities. It is used to simulate an attack on the system and identify any weaknesses that may be exploited by malicious actors. As stated in the CompTIA Security+ Study Guide, "penetration testing is a type of security assessment that attempts to gain unauthorized access to networks and systems by exploiting security vulnerabilities."

• Question 943:

  SIMULATION

  You are tasked with verifying the following requirements are met in order to ensure network security.

  Requirements:

  Datacenter

  Ensure network is subnetted to allow all devices to communicate properly while minimizing address space usage

  Provide a dedicated server to resolve IP addresses and hostnames correctly and handle port 53 traffic Building A

  Ensure network is subnetted to allow all devices to communicate properly while minimizing address space usage

  Provide devices to support 5 additional different office users

  Add an additional mobile user

  Replace the Telnet server with a more secure solution Screened subnet

  Ensure network is subnetted to allow all devices to communicate properly while minimizing address space usage

  Provide a server to handle external 80/443 traffic

  Provide a server to handle port 20/21 traffic

  INSTRUCTIONS

  Drag and drop objects onto the appropriate locations. Objects can be used multiple times and not all placeholders need to be filled.

  Available objects are located in both the Servers and Devices tabs of the Drag and Drop menu.

  If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

  

  A. See explanation below.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See explanation below.

  ---

  Top left subnet - 206.208.134.0/28

  Top right subnet - 10.72.63.0/28

  Bottom subnet - 192.168.11.0/28

  Screened Subnet devices - Web server, FTP server

  Building A devices - SSH server top left, workstations on all 5 on the right, laptop on bottom left

  DataCenter devices - DNS server.

• Question 944:

  A new office space is being designed. The network switches are up. but no services are running yet A network engineer plugs in a laptop configured as a DHCP client to a switch. Which ol the following IP addresses should be assigned to the laptop?

  A. 10.1.1.1
  B. 169.254.1.128
  C. 172 16 128 128
  D. 192 168.0.1
  B. 169.254.1.128

  ---

  Explanation/Reference:

  When a DHCP client is connected to a network and no DHCP server is available, the client can automatically configure a link-local address in the 169.254.0.0/16 range using the Automatic Private IP Addressing (APIPA) feature. So, the correct answer is option B, 169.254.1.128. This is also known as an APIPA address. Reference: CompTIA Network+ Study Guide, Exam N10-007, Fourth Edition, by Todd Lammle (Chapter 4: IP Addressing)

• Question 945:

  The management team needs to ensure unnecessary modifications to the corporate network are not permitted and version control is maintained. Which of the following documents would BEST support this?

  A. An incident response plan
  B. A business continuity plan
  C. A change management policy
  D. An acceptable use policy
  C. A change management policy

  ---

  Explanation/Reference:

  - Change Management Policy: This policy sets out the rules and guidelines for making changes to the network, including who is authorized to make changes, how changes are requested and approved, and how changes are documented.

• Question 946:

  A network administrator needs to keep track of the locations of installed network equipment. Which of the following would be the BEST method to accomplish this task?

  A. Tamper detection
  B. Asset tags
  C. Video surveillance
  D. Motion detection
  B. Asset tags

• Question 947:

  A disaster recovery team needs a solution that would best meet the following requirements:

  1.

  The server infrastructure has been pre-installed

  2.

  The fail-over location offers basic life support.

  3.

  The fail-over location provides basic network connectivity.

  4.

  Minimizing cost is preferred over quicker business recovery times

  5.

  The expected time for services to be fully operational is days.

  Which of the following sites would meet the requirements?

  A. Cold site
  B. Cloud site
  C. Warm site
  D. Hot site
  C. Warm site

  ---

  Explanation/Reference:

  A warm site is a scaled-down version of a hot site. The recovery site is often only configured with power, phone, and network jacks. It may have computers and other resources, but they are not configured and ready to go.

  -You bring the hardware, software, data

  -A second site in the event of a disaster

  -Doesn't mirror all live data

• Question 948:

  Which of the following is used to track and document various types of known vulnerabilities?

  A. CVE
  B. Penetration testing
  C. Zero-day
  D. SIEM
  E. Least privilege
  A. CVE

  ---

  Explanation/Reference:

  CVE is the acronym for Common Vulnerabilities and Exposures and the link to the website is posted by EpitomeOfSalt.

• Question 949:

  A technician removes an old PC from the network and replaces it with a new PC that is unable to connect to the LAN. Which of the Mowing is MOST likely the cause of the issue?

  A. Port security
  B. Port tagging
  C. Port aggregation
  D. Port mirroring
  A. Port security

  ---

  Explanation/Reference:

  The most likely cause of the issue is port security. When a new device is connected to a network, port security can prevent the device from connecting if it is not authorized. The old PC might have been authorized to connect, but the new PC is not. To resolve the issue, the technician will need to configure port security to allow the new PC to connect.

• Question 950:

  A network administrator needs to implement routing capabilities in a hypervisor. Which of the following should the administrator most likely implement?

  A. VPC
  B. Firewall
  C. NFV
  D. laaS
  C. NFV

  ---

  Explanation/Reference:

  To implement routing capabilities in a hypervisor, the administrator should most likely implement NFV (Network Functions Virtualization). NFV involves virtualizing network functions, such as routing, within a software environment rather than relying on dedicated hardware appliances. This allows for more flexibility, scalability, and efficient use of resources in a virtualized environment.