N10-009 Real Exam Questions
997 questions available · Page 1 of 100
Updated Exam DumpsVerified AnswersPass Guarantee
Which of the following attacks forces a switch to send all traffic out of all ports?
Correct answer: C
MAC flooding overwhelms a switch's MAC address table with large numbers of fabricated entries. When the switch can no longer associate a destination MAC address with a specific port, it treats the frame as unknown unicast traffic and floods it through the other ports in the VLAN.
A network deployment engineer is deploying a new single-channel 10G optical connection.
Which of the following optics should the engineer MOST likely use to satisfy this requirement?
Correct answer: D
SFP+ is the enhanced small form-factor pluggable format used for a single 10G channel, so it matches both the speed and single-channel requirements. Standard SFP is associated with lower-speed links. QSFP and QSFP+ are quad-lane formats intended to combine multiple channels rather than represent the requested single 10G optical channel.
During a VoIP call, a user notices inconsistent audio and logs an incident ticket. A network administrator notices inconsistent delays in arrival of the RTP packets.
Which of the following troubleshooting tools should the network administrator use to determine the issue?
Correct answer: B
A protocol analyzer captures and decodes network packets, including RTP traffic used by the VoIP call. By examining timestamps and packet sequence information, the administrator can measure variation in arrival delay and identify jitter or loss. Physical cable tools test wiring, while a spectrum reader examines radio-frequency conditions rather than RTP timing.
Which of the following types of attacks is most likely to occur after an attacker sets up an evil twin?
Correct answer: A
An evil twin impersonates a legitimate wireless access point so users connect through an attacker-controlled device. Once traffic passes through that device, the attacker is positioned between the client and the intended network and can observe or manipulate communications. This placement enables an on-path attack.
A user cannot access an external server for a client after connecting to a VPN.
Which of the following commands would a support agent most likely use to examine the issue? (Select two).
Correct answers: E, F
route print displays the local routing table, revealing whether connecting the VPN installed a route for the external server's network or redirected traffic through an unsuitable gateway. tracert then identifies the sequence of hops and where traffic stops. Together they examine both the client's route selection and the actual forwarding path after VPN connection.
A device is experiencing disconnection from the wireless network. A network support engineer needs to find the root cause of the issue.
Which of the following should the engineer use to isolate the device on a packet capture?
Correct answer: B
A device's MAC address identifies its network interface at the data-link layer and appears in captured local wireless frames. Filtering the capture on that MAC isolates traffic sent or received by the affected device. An ESSID identifies a wireless network, while a BSSID identifies an AP radio rather than the client.
Simulation
After a recent power outage, users are reporting performance issues accessing the application servers. Wireless users are also reporting intermittent Internet issues.
INSTRUCTIONS
Click on each tab at the top of the screen. Select a widget to view information, then use the drop-down menus to answer the associated questions.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Network Health
Correct Answer: WAN 2
WAN 2 should be preferred for VoIP traffic because it has lower packet loss, latency, and jitter than WAN 1.
VoIP traffic is highly sensitive to packet loss, latency, and jitter. Although WAN 1 has higher average throughput, WAN 2 provides substantially better real-time network performance and is therefore the preferred connection for VoIP traffic.
Device Monitoring
Correct Answer: Router A
Router A is the device experiencing connectivity issues. The Device Status information shows that one monitored device is down, and the simulation identifies Router A as that device.
A down router can disrupt connectivity between network segments and contribute to the reported application-server and Internet connectivity problems following the power outage.
A technician connects an IP camera to a switch port. The port successfully powers a VoIP phone, but the camera does not power on.
Select the MOST likely cause.
Correct answer: C
The working VoIP phone establishes that the switch port can deliver power and that PoE is enabled. A camera can demand more power than the port's supported PoE level supplies. If the camera requires a higher PoE standard, the lower-power port can operate the phone while failing to provide enough power for the camera to start.
A user's desk has a workstation and an IP phone. The user is unable to browse the internet on the workstation, but the phone works.
Which of the following configurations is required?
Correct answer: C
The working IP phone demonstrates that the switch connection and voice VLAN path are functioning. The workstation's traffic must instead be associated with a data VLAN so it receives the appropriate addressing and network access for ordinary user traffic. Configuring the data VLAN restores the missing workstation path without changing the already-working voice path.
Which of the following is used to estimate the average life span of a device?
Correct answer: C
MTBF is the average operating time between one repairable failure and the next. A higher value indicates that a device is expected to function longer before failing, so it serves as a reliability-based estimate of useful operating life. MTTR measures repair duration, while RTO and RPO are recovery objectives rather than hardware-life measures.