CompTIA N10-009 Online Practice Questions and Exam Preparation

CompTIA N10-009 Online Questions & Answers

• Question 1:

  SIMULATION

  A network technician replaced an access layer switch and needs to reconfigure it to allow the connected devices to connect to the correct networks.

  INSTRUCTIONS

  Click on the appropriate port(s) on Switch 1 and Switch 3 to verify or reconfigure the correct settings:

  Ensure each device accesses only its correctly associated network.

  5. Disable all unused switchports.

  6. Require fault-tolerant connections

  between the switches.

  Only make necessary changes to complete the above requirements.

  

  

  

  A. See the solution below in explanation.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See the solution below in explanation.

  ---

  Explanation

  To provide a complete solution for configuring the access layer switches, let's proceed with the following steps:

  Identify the correct VLANs for each device and port.

  Enable necessary ports and disable unused ports.

  Configure fault-tolerant connections between the switches.

  Configuration Details

  Switch 1

  Port 1 Configuration (Uplink to Core Switch)

  Status: Enabled

  LACP: Enabled

  Speed: 1000

  Duplex: Full

  VLAN Configuration: Tagged for VLAN60, VLAN90, VLAN120, VLAN150, VLAN220

  Port 2 Configuration (Uplink to Core Switch)

  Status: Enabled

  LACP: Enabled

  Speed: 1000

  Duplex: Full

  VLAN Configuration: Tagged for VLAN60, VLAN90, VLAN120, VLAN150, VLAN220

  Port 3 Configuration (Server Connection)

  Status: Enabled

  LACP: Disabled

  Speed: 1000

  Duplex: Full

  VLAN Configuration: Untagged for VLAN90 (Servers)

  Port 4 Configuration (Server Connection)

  Status: Enabled

  LACP: Disabled

  Speed: 1000

  Duplex: Full

  VLAN Configuration: Untagged for VLAN90 (Servers)

  Port 5 Configuration (Wired Users and WLAN)

  Status: Enabled

  LACP: Enabled

  Speed: 1000

  Duplex: Full

  VLAN Configuration: Tagged for VLAN60, VLAN120, VLAN150

  Port 6 Configuration (Wired Users and WLAN)

  Status: Enabled

  LACP: Enabled

  Speed: 1000

  Duplex: Full

  VLAN Configuration: Tagged for VLAN60, VLAN120, VLAN150

  Port 7 Configuration (Voice and Wired Users)

  Status: Enabled

  LACP: Enabled

  Speed: 1000

  Duplex: Full

  VLAN Configuration: Tagged for VLAN60, VLAN90, VLAN120, VLAN220

  Port 8 Configuration (Voice, Printers, and Wired Users) Status: Enabled

  LACP: Enabled

  Speed: 1000

  Duplex: Full

  VLAN Configuration: Tagged for VLAN60, VLAN90, VLAN120, VLAN220

  Switch 3

  Port 1 Configuration (Unused)

  Status: Disabled

  LACP: Disabled

  Port 2 Configuration (Unused)

  Status: Disabled

  LACP: Disabled

  Port 3 Configuration (Connection to Device)

  Status: Enabled

  LACP: Disabled

  Speed: 1000

  Duplex: Full

  VLAN Configuration: Untagged for VLAN1 (Default)

  Port 4 Configuration (Connection to Device)

  Status: Enabled

  LACP: Disabled

  Speed: 1000

  Duplex: Full

  VLAN Configuration: Untagged for VLAN1 (Default)

  Port 5 Configuration (Connection to Device)

  Status: Enabled

  LACP: Disabled

  Speed: 1000

  Duplex: Full

  VLAN Configuration: Untagged for VLAN1 (Default)

  Port 6 Configuration (Connection to Device)

  Status: Enabled

  LACP: Disabled

  Speed: 1000

  Duplex: Full

  VLAN Configuration: Untagged for VLAN1 (Default)

  Port 7 Configuration (Connection to Device)

  Status: Enabled

  LACP: Disabled

  Speed: 1000

  Duplex: Full

  VLAN Configuration: Untagged for VLAN1 (Default)

  Ports 1 and 2 on Switch 1 are configured as trunk ports with VLAN tagging enabled for all necessary VLANs.

  Ports 3 and 4 on Switch 1 are configured for server connections with VLAN 90 untagged.

  Ports 5, 6, 7, and 8 on Switch 1 are configured for devices needing access to multiple VLANs.

  Unused ports on Switch 3 are disabled.

  Ports 3, 4, 5, 6, and 7 on Switch 3 are enabled for default VLAN1. Core Switch Ports should be configured as needed for uplinks to Switch 1. Ensure LACP is enabled for redundancy on trunk ports between switches.

  Summary of Configurations Ensure All Switches and Ports are Configured as per the Requirements:By following these configurations, each device will access only its correctly associated network, unused switch ports will be disabled, and fault-tolerant connections will be established between the switches.

• Question 2:

  A user tries to visit a website, but instead of the intended site, the page displays vmw.cba.com.

  Which of the following should be done to reach the correct website?

  A. Modify the CNAME record
  B. Update the PTR record
  C. Change the NTP settings
  D. Delete the TXT record
  A. Modify the CNAME record

  ---

  Explanation

  A CNAME (Canonical Name) record maps an alias to the correct fully qualified domain name (FQDN). If a user is redirected to the wrong hostname, correcting or updating the CNAME ensures the alias points to the proper domain.

  Option B: PTR record maps IP to hostname (reverse DNS), not forward website resolution.

  Option C: NTP relates to time sync, irrelevant to DNS resolution.

  Option D: TXT record stores metadata like SPF or DKIM info, not used for hostname aliasing.

  References:

  Domain: Network Standards, Protocols, and Implementations -- DNS record types (A, AAAA, CNAME, PTR, TXT).

• Question 3:

  A company's Chief Information Security Officer requires that servers and firewalls have accurate time stamps when creating log files so that security analysts can correlate events during incident investigations.

  Which of the following should be implemented?

  A. Syslog server
  B. SMTP
  C. NTP
  D. SNMP
  C. NTP

  ---

  Explanation

  The correct solution is NTP (Network Time Protocol). Accurate timestamps across servers, firewalls, and network devices are critical for correlating logs during incident response. NTP synchronizes device clocks to a trusted time source, ensuring consistency across the network.

  Option A: Syslog centralizes logs but does not synchronize time.

  Option B: SMTP is email transfer, unrelated to time.

  Option D: SNMP monitors devices but does not correct time discrepancies.

  By implementing NTP, analysts can ensure that logs from different devices are time-aligned, which is essential for reconstructing attack timelines and detecting anomalies.

  References:

  Domain: Network Operations -- Time synchronization, NTP, log correlation.

• Question 4:

  A user recently moved a workstation to a different part of the office. The user is able to access the internet and print but is unable to access server resources.

  Which of the following is the most likely cause of the issue?

  A. Incorrect default gateway
  B. Wrong VLAN assignment
  C. Error-disabled port
  D. Duplicate IP address
  B. Wrong VLAN assignment

  ---

  Explanation

  If a workstation can access the internet and printers (likely in another VLAN) but not internal servers, the port was likely placed into the wrong VLAN after the move. VLAN assignment controls Layer 2 segmentation, restricting access to resources on different VLANs.

  Option A: A wrong default gateway would prevent internet access.

  Option C: An error-disabled port would block all connectivity.

  Option D: A duplicate IP would cause general network issues, not just missing server access.

  References:

  Domain: Network Troubleshooting -- VLAN misconfiguration, connectivity issues.

• Question 5:

  Which of the following must be implemented to securely connect a company's headquarters with a branch location?

  A. Split-tunnel VPN
  B. Clientless VPN
  C. Full-tunnel VPN
  D. Site-to-site VPN
  D. Site-to-site VPN

  ---

  Explanation

  Site-to-Site VPN: A site-to-site VPN is used to securely connect two networks, such as a company's headquarters and a branch location, over the internet. This type of VPN creates a secure tunnel for data transmission, ensuring confidentiality and integrity.

  Split-tunnel VPN (A): Allows some traffic to bypass the VPN tunnel, which may not secure all communications.

  Clientless VPN (B): Used for individual users to access the network without VPN client software.

  Full-tunnel VPN (C): Typically used for individual user traffic rather than connecting two networks.

• Question 6:

  A network engineer configures an application server so that it automatically adjusts resource allocation as demand changes. This server will host a new application and demand is not predictable.

  Which of the following concepts does this scenario demonstrate?

  A. Scalability
  B. Software as a Service
  C. Hybrid cloud
  D. Elasticity
  D. Elasticity

  ---

  Explanation

  Elasticity is the ability of a system (often in cloud environments) to automatically scale resources up or down in real time based on demand.

  Option A: Scalability means the ability to grow over time but not necessarily dynamically.

  Option B: SaaS is a service model, not a resource-allocation concept.

  Option C: Hybrid cloud is a deployment model, not a performance behavior.

  References:

  Domain: Networking Concepts -- Cloud computing, elasticity vs. scalability.

• Question 7:

  A help desk technician is concerned that a client's network cable issues may be causing intermittent connectivity.

  Which of the following would help the technician determine if this is the issue?

  A. Run the show interface command on the switch
  B. Run the traceroute command on the server
  C. Run iperf on the technician's desktop
  D. Ping the client's computer from the router
  E. Run a port scanner on the client's IP address
  A. Run the show interface command on the switch

• Question 8:

  A secure communication link needs to be configured between data centers via the internet. The data centers are located in different regions.

  Which of the following is the best protocol for the network administrator to use?

  A. DCI
  B. GRE
  C. VXLAN
  D. IPSec
  D. IPSec

  ---

  Explanation

  IPSec (Internet Protocol Security)is the best choice for secure communication over the internet, as it provides encryption, authentication, and data integrity. It is widely used in VPNs and site-to-site secure tunnels.

  Breakdown of Options:

  Option A. DCI (Data Center Interconnect) - A general term for linking data centers, but it doesn't specify a secure tunneling protocol.

  Option B. GRE (Generic Routing Encapsulation) - Encapsulates traffic but lacks encryption, making it less secure than IPSec.

  Option C. VXLAN (Virtual Extensible LAN) - Used for Layer 2 network overlays not for securing, communication over the internet.

  Option D. IPSec-Correct answer. Provides encryption, authentication, and integrity for data over the internet.

• Question 9:

  Which of the following would a network administrator configure to set NTP settings for a specific subnet within DHCP?

  A. Reservation
  B. Lease time
  C. Scope options
  D. Exclusion range
  C. Scope options

• Question 10:

  A network technician needs to install patch cords from the UTP patch panel to the access switch for a newly occupied set of offices. The patch panel is not labeled for easy jack identification.

  Which of the following tools provides the easiest way to identify the appropriate patch panel port?

  A. Toner
  B. Laptop
  C. Cable tester
  D. Visual fault locator
  A. Toner

  ---

  Explanation

  A toner probe, often referred to as a toner and probe kit, is the easiest and most effective tool for identifying individual cables in a bundle, especially in situations where the patch panel is not labeled. The toner sends an audible tone through the cable, and the probe detects the tone at the other end, allowing the technician to quickly identify the correct cable.

  Functionality: The toner generates a tone that travels along the cable. When the probe is placed near the correct cable, it detects the tone and emits a sound.

  Ease of Use: Toner probes are straightforward to use, even in environments with many cables, making them ideal for identifying cables in unlabeled patch panels.

  Efficiency: This method is much faster and more reliable than manual tracing, especially in complex setups.

  References:

  CompTIA Network+ N10-007 Official Certification Guide: Details tools used for cable identification and troubleshooting.

  Cisco Networking Academy: Provides training on using toner probes and other cable testing tools.

  Network+ Certification All-in-One Exam Guide: Explains the use of different tools for network cable identification and management.