CompTIA CompTIA Certifications N10-008 Questions & Answers

• Question 951:

  Users attending security training at work are advised not to use single words as passwords for corporate applications. Which of the following does this BEST protect against?

  A. An on-path attack

  B. A brute-force attack

  C. A dictionary attack

  D. MAC spoofing

  E. Denial of service

  Correct Answer: C

  While the answer can be both a brute force attack and a dictionary attack, the best answer for this question is a dictionary attack. A dictionary attack software matches the hash to those produced by ordinary words found in a dictionary.

• Question 952:

  A network administrator would like to enable NetFlow on a Layer 3 switch but is concerned about how the feature may impact the switch. Which of the following metrics should the administrator graph using SNMP to BEST measure the feature's impact?

  A. CPU usage

  B. Temperature

  C. Electrical consumption

  D. Bandwidth usage

  Correct Answer: A

  CPU usage would be one of the key metrics to measure the impact of NetFlow on a Layer 3 switch as it would indicate if the switch is experiencing any increased processing workload due to the feature being enabled. It would be a good idea to also monitor the memory usage of the switch to ensure that it does not run out of memory when NetFlow is enabled.

  Reference: http://etutorials.org/Networking/network+management/Part+II+Implementations+on+the+Cisco+Devices/Chapter+7.+NetFlow/Deployment+Guidelines/

• Question 953:

  Which of the following protocols would allow a secure connection to a Linux-based system?

  A. SMB

  B. FTP

  C. RDP

  D. SSH

  Correct Answer: D

• Question 954:

  A network administrator is troubleshooting the communication between two Layer 2 switches that are reporting a very high runt count. After trying multiple ports on both switches, the issue persists. Which of the following should the network administrator perform to resolve the issue?

  A. Increase the MTU size on both switches.

  B. Recertify the cable between both switches.

  C. Perform a factory reset on both switches.

  D. Enable debug logging on both switches.

  Correct Answer: B

  Runts are frames that are smaller than the minimum frame size (64 bytes) and are typically considered errors in a network. When Layer 2 switches report a high runt count, it often indicates a problem with the physical layer, such as a mismatch or issue with the cabling.

  By trying multiple ports on both switches and still encountering the issue, it's likely that the problem is not limited to a single port or switch. Given this situation, the most appropriate action is to focus on the common element in the communication path, which is the cable connecting the two switches.

  Recertifying the cable involves testing its quality, verifying that it meets the required specifications, and ensuring that it is properly terminated. This can help identify and address any physical issues with the cable that might be causing runts.

• Question 955:

  Which of the following ports are associated with IMAP? (Choose two.)

  A. 25

  B. 110

  C. 143

  D. 587

  E. 993

  F. 995

  Correct Answer: CE

  IMAP (Internet Message Access Protocol):

  -

  Port 143: This is the default port used for unencrypted IMAP connections.

  -

  Port 993: This is the default port used for encrypted IMAP connections using SSL (Secure Sockets Layer) or TLS (Transport Layer Security). Reference: https://billing.precedence.com.au/billing/knowledgebase/70/Mail-Ports-for-POP3-IMAP-and-SMTP.html

• Question 956:

  A network administrator is trying to identify a device that is having issues connecting to a switchport. Which of the following would BEST help identify the issue?

  A. A syslog server

  B. Change management records

  C. A rack diagram

  D. The security log

  Correct Answer: C

• Question 957:

  A company with multiple routers would like to implement an HA network gateway with the least amount of downtime possible. This solution should not require changes on the gateway setting of the network clients. Which of the following should a technician configure?

  A. Automate a continuous backup and restore process of the system's state of the active gateway.

  B. Use a static assignment of the gateway IP address on the network clients.

  C. Configure DHCP relay and allow clients to receive a new IP setting.

  D. Configure a shared VIP and deploy VRRP on the routers.

  Correct Answer: D

  The open standard protocol Virtual Router Redundancy Protocol (VRRP) is similar to HSRP, the differences mainly being in terminology and packet formats. In VRRP, the active router is known as the master, and all other routers in the group are known as backup routers. There is no specific standby router; instead, all backup routers monitor the status of the master, and in the event of a failure, a new master router is selected from the available backup routers based on priority

• Question 958:

  A network technician was hired to harden the security of a network. The technician is required to enable encryption and create a password for AP security through the web browser. Which of the following would BEST support these requirements?

  A. ESP

  B. WPA2

  C. IPSec

  D. ACL

  Correct Answer: B

• Question 959:

  Which of the following OSI model layers contains IP headers?

  A. Presentation

  B. Application

  C. Data link

  D. Network

  E. Transport

  Correct Answer: D

  The OSI model is a conceptual framework that helps to understand how different protocols and technologies work together to enable communication between devices. In this model, the Network layer is responsible for routing and addressing, which includes the use of IP (Internet Protocol) headers. IP headers contain information about the source and destination of a packet, as well as other parameters used for routing and fragmentation.

• Question 960:

  A small office is running WiFi 4 APs, and neighboring offices do not want to increase the throughput to associated devices. Which of the following is the MOST cost-efficient way for the office to increase network performance?

  A. Add another AP.

  B. Disable the 2.4GHz radios.

  C. Enable channel bonding.

  D. Upgrade to WiFi 5.

  Correct Answer: C

  Enabling channel bonding can be the cheapest way for the office to increase network performance. This approach combines two adjacent channels, effectively doubling the bandwidth available for devices. Upgrading to WiFi 5 or adding another AP might result in higher costs, and disabling the 2.4GHz radios would limit the number of devices that could connect to the network.