CompTIA CompTIA Certifications N10-008 Questions & Answers

• Question 971:

  Which of the following BEST describes a North-South traffic flow?

  A. A public Internet user accessing a published web server

  B. A database server communicating with another clustered database server

  C. A Layer 3 switch advertising routes to a router

  D. A management application connecting to managed devices

  Correct Answer: A

  North-South traffic flow refers to data communication between networks or devices located in different geographical locations, usually between a client or end-user device and a server or data center. This is commonly used to describe a public Internet user accessing a published web server.

• Question 972:

  Which of the following VPN configurations should be used to separate Internet and corporate traffic?

  A. Split-tunnel

  B. Remote desktop gateway

  C. Site-to-site

  D. Out-of-band management

  Correct Answer: A

  Split-tunnel VPN configuration should be used to separate Internet and corporate traffic. This configuration only routes the corporate traffic through the VPN tunnel while allowing Internet traffic to access the Internet directly, providing a more secure connection and reducing the load on the VPN.

• Question 973:

  At the destination host, which of the following OSI model layers will discard a segment with a bad checksum in the UDP header?

  A. Network

  B. Data link

  C. Transport

  D. Session

  Correct Answer: C

  In the OSI model, the transport layer is responsible for providing end-to-end communication services to the upper layers. One of the key responsibilities of the transport layer is to ensure the integrity of data being transmitted.

  In the case of a UDP segment, the transport layer at the destination host will check the checksum in the UDP header. If the checksum is incorrect or invalid, the transport layer will discard the segment as it indicates that the data has been corrupted during transmission.

• Question 974:

  A voice engineer is troubleshooting a phone issue. When a call is placed, the caller hears echoes of the receiver's voice. Which of the following are the causes of this issue? (Choose two.)

  A. Jitter

  B. Speed mismatch

  C. QoS misconfiguration

  D. Protocol mismatch

  E. CRC errors

  F. Encapsulation errors

  Correct Answer: AC

  -

  Jitter refers to the variation in the arrival time of packets, which can cause delays or disruptions in the delivery of audio or voice data. In the context of a phone call, jitter can cause the audio packets to arrive at the receiver at different times, leading to gaps in the audio and potential echoes. This is because some of the audio data may be repeated due to the receiver receiving the same audio packet more than once, resulting in an echo effect.

  -

  QoS (Quality of Service) misconfiguration can also lead to echoes by causing latency or delay in the transmission of audio data. QoS helps to prioritize network traffic, ensuring that voice or audio data is given priority over other types of traffic on the network. If QoS is misconfigured or not optimized properly, the voice data may experience delay or latency, leading to potential echoes or other audio artifacts. This is because the audio packets may arrive at the receiver at different times, causing overlapping audio and resulting in an echo effect.

• Question 975:

  After a firewall replacement, some alarms and metrics related to network availability stopped updating on a monitoring system relying on SNMP. Which of the following should the network administrator do FIRST?

  A. Modify the device's MIB on the monitoring system.

  B. Configure syslog to send events to the monitoring system.

  C. Use port mirroring to redirect traffic to the monitoring system.

  D. Deploy SMB to transfer data to the monitoring system.

  Correct Answer: A

  In this scenario, the network administrator should first modify the device's Management Information Base (MIB) on the monitoring system. A MIB is a database used by SNMP to manage and monitor devices in a network. After replacing the firewall, the SNMP MIB on the monitoring system might not be updated to reflect the changes made on the new device, and this might cause some alarms and metrics related to network availability to stop updating.

  By modifying the device's MIB on the monitoring system, the administrator can ensure that the monitoring system can communicate properly with the new firewall and receive updated information on network availability. Configuring syslog, using port mirroring, or deploying SMB are all methods of transferring data to the monitoring system but they do not address the root cause of the problem, which is the lack of updated MIB on the monitoring system.

• Question 976:

  A systems administrator is configuring a firewall using NAT with PAT. Which of the following would be BEST suited for the LAN interface?

  A. 172.15.0.0/18

  B. 172.18.0.0/10

  C. 172.23.0.0/16

  D. 172.28.0.0/8

  E. 172.32.0.0/14

  Correct Answer: C

  NAT and PAT translate private IPs to public IPs, so we're seeking a private IP.

  Addresses 172.16.0.0 - 172.31.255.255 are private, excluding options A and E.

  Using CIDR, consider the remaining answers:

  Answer B) 172.18.0.0/10 has subnet mask 255.192.0.0 (10 network bits).

  To find network address we need to do a bitwise "AND" operation with the IP and subnet mask:

  Comparing bits side by side. If both bits are 1 it's a 1. If any bit is a 0 it's a 0.

  Subnet mask: 11111111.11000000.00000000.00000000(255.192.0.0)

  IP address: 10101100.00010010.00000000.00000000(172.18.0.0)

  Result: 10101100.00000000.00000000.00000000 (172.0.0.0)

  Network: 172.0.0.0

  Range: 172.0.0.1-172.63.255.254

  Broadcast: 172.63.255.255

• Question 977:

  A packet is assigned a value to ensure it does not traverse a network indefinitely. Which of the following BEST represents this value?

  A. Zero Trust

  B. Planned obsolescence

  C. Time to live

  D. Caching

  Correct Answer: C

  The Time to Live (TTL) value is a field in the IP header of a packet that tells the number of hops (or routers) a packet can pass through before it is discarded. The TTL is typically set to a high value, such as 64 or 128, when a packet is first sent, and it is decremented by one each time the packet passes through a router. When the TTL value reaches zero, the packet is discarded, and a "time exceeded" message is sent back to the sender. This mechanism is used to prevent packets from traversing a network indefinitely, which could cause network congestion and slow down the network.

• Question 978:

  Which of the following policies should be referenced when a user wants to access work email on a personal cell phone?

  A. Offboarding policy

  B. Acceptable use policy

  C. BYOD policy

  D. Remote access policy

  Correct Answer: C

  When a user wants to access work email on a personal cell phone, the relevant policy that should be referenced is the Bring Your Own Device (BYOD) policy. A BYOD policy is a set of rules and guidelines that govern the use of personal devices such as cell phones, laptops, and tablets to access company resources.

  The BYOD policy typically outlines the requirements that the user needs to fulfill to access work email on a personal cell phone, including device security standards, access controls, data protection, and usage guidelines. By referencing the BYOD policy, the user can ensure that they understand the requirements and expectations for using their personal cell phone to access work email, while also protecting sensitive company information.

• Question 979:

  A rogue AP was found plugged in and providing Internet access to employees in the break room. Which of the following would be BEST to use to stop this from happening without physically removing the WAP?

  A. Password complexity

  B. Port security

  C. Wireless client isolation

  D. Secure SNMP

  Correct Answer: B

  Port security, would be the best option to use to stop the rogue AP in this scenario. Port security is a feature that can be used to limit the number of devices that can be connected to a switchport. By configuring port security on the switchport to which the rogue AP is connected, the network administrator can ensure that only authorized devices are able to connect to the network and receive an IP address. This would prevent unauthorized devices, such as the rogue AP, from providing Internet access to employees in the break room.

• Question 980:

  A company's network is set up so all Internet-bound traffic from all remote offices exits through a main datacenter. Which of the following network topologies would BEST describe this setup?

  A. Bus

  B. Spine-and-leaf

  C. Hub-and-spoke

  D. Mesh

  Correct Answer: C

  A hub-and-spoke network topology is a type of network design in which all remote offices (spokes) connect to a central point (hub), typically a datacenter, where all Internet-bound traffic exits. In this setup, the hub acts as the centralized point of control and management for the entire network.