CompTIA N10-009 Online Practice Questions and Exam Preparation

CompTIA N10-009 Online Questions & Answers

• Question 151:

  Which of the following is the best VPN to use for reducing data bandwidth requirements of the corporate network?

  A. Split-tunnel
  B. Site-to-site
  C. Full-tunnel client
  D. GRE tunnel
  A. Split-tunnel

  ---

  Explanation

  A split-tunnel VPN allows a device to route some traffic through the VPN (typically corporate traffic) while sending other traffic (like general internet browsing) directly over the local internet connection. Thisreduces the load on the corporate network because not all traffic is routed through the VPN tunnel.

  Site-to-site VPNsare for permanent links between locations.

  Full-tunnel VPNsroute all traffic through the VPN, increasing the bandwidth usage on the corporate network.

  GRE (Generic Routing Encapsulation)is a tunneling protocol that doesn't encrypt and doesn't reduce bandwidth usage by itself.

  References:

  CompTIA Network+ N10-009 Official Objectives: 3.3?Given a scenario, configure and deploy common VPN technologies.

• Question 152:

  A network engineer performed a migration to a new mail server. The engineer changed the MX record, verified the change was accurate, and confirmed the new mail server was reachable via the IP address in the A record. However, users are not receiving email.

  Which of the following should the engineer have done to prevent the issue from occurring?

  A. Change the email client configuration to match the MX record.
  B. Reduce the TTL record prior to the MX record change.
  C. Perform a DNS zone transfer prior to the MX record change.
  D. Update the NS record to reflect the IP address change.
  B. Reduce the TTL record prior to the MX record change.

• Question 153:

  A new staff member is unable to connect to the network. An IT support staff member finds the following: The IP configuration is correct.

  The TCP/IP stack is working on the workstation.

  The gateway is unreachable.

  Which of the following would the IT support staff member most likely check next?

  A. The DHCP configuration on the workstation
  B. The port's VLAN assignment on the switch
  C. The DHCP configuration on the router
  D. The default gateway on the switch
  B. The port's VLAN assignment on the switch

  ---

  Explanation

  The correct answer is The port's VLAN assignment on the switch because the symptoms indicate a Layer 2 segmentation issue. According to CompTIA Network+ (N10-009) troubleshooting methodology and VLAN concepts, if the IP configuration is correct and the TCP/IP stack is functioning, but the default gateway is unreachable, the issue often involves improper VLAN configuration. In a switched environment, devices must be assigned to the correct VLAN to communicate with the appropriate default gateway interface (often configured on a router or Layer 3 switch). If the user's switch port is assigned to the wrong VLAN, the workstation may have a valid IP address but will not be able to reach the gateway because it is logically separated into a different broadcast domain.

  Option A is unlikely since the IP configuration is already confirmed correct.

  Option C is not relevant because the issue is localized to a specific user, not a widespread DHCP failure.

  Option D refers to switch management configuration, which does not affect user traffic routing to the gateway.

  Therefore, verifying the switch port's VLAN assignment is the most appropriate next troubleshooting step.

• Question 154:

  A network administrator is in the process of installing 35 PoE security cameras. After the administrator installed and tested the new cables, the administrator installed the cameras.

  However, a small number of the cameras do not work.

  Which of the following is the most reason?

  A. Incorrect wiring standard
  B. Power budget exceeded
  C. Signal attenuation
  D. Wrong voltage
  B. Power budget exceeded

  ---

  Explanation

  When installing multiple Power over Ethernet (PoE) devices like security cameras, it is crucial to ensure that the total power requirement does not exceed the power budget of the PoE switch. Each PoE switch has a maximum power capacity, and exceeding this capacity can cause some devices to fail to receive power.

  PoE Standards: PoE switches conform to standards such as IEEE 802.3af (PoE) and 802.3at (PoE+), each with specific power limits per port and total power capacity.

  Power Calculation: Adding up the power requirements of all connected PoE devices can help determine if the total power budget of the switch is exceeded.

  Symptoms: When the power budget is exceeded, some devices, typically those farthest from the switch or connected last, may not power up or function correctly.

  References:

  CompTIA Network+ N10-007 Official Certification Guide: Covers PoE standards and troubleshooting power issues.

  Cisco Networking Academy: Discusses PoE technologies, power budgeting, and managing PoE devices.

  Network+ Certification All-in-One Exam Guide: Provides information on PoE setup, including power budget considerations.

• Question 155:

  Which of the following ports is used to transfer data between mail exchange servers?

  A. 21
  B. 25
  C. 53
  D. 69
  B. 25

  ---

  Explanation

  The correct answer is 25, which is the default port used by SMTP (Simple Mail Transfer Protocol) for communication between mail servers. According to CompTIA Network+ (N10-009) objectives under common port numbers and protocols, SMTP operates over TCP port 25 for server-to-server email transmission.

  When an email is sent from one domain to another, the sending mail server queries DNS for the recipient domain's MX (Mail Exchange) record and then establishes an SMTP session over TCP port 25 to deliver the message. This port is specifically designated for mail relay between mail transfer agents (MTAs).

  Port 21 is used for FTP (File Transfer Protocol), 53 is used for DNS (Domain Name System), and 69 is used for TFTP (Trivial File Transfer Protocol). None of these are responsible for transferring email between mail servers.

  While SMTP can also use ports 587 (submission) and 465 (SMTPS) for client-to-server communication, port 25 remains the standard for mail server-to-mail server communication.

  Therefore, TCP port 25 is the correct answer.

• Question 156:

  A new company moved into a corporate center. Users in the shared lobby are experiencing disconnects on mobile devices.

  Which of the following is the BEST troubleshooting tool?

  A. Port scanner
  B. Protocol analyzer
  C. NetFlow analyzer
  D. Wi-Fi analyzer
  D. Wi-Fi analyzer

• Question 157:

  A systems administrator needs to connect two laptops to a printer via Wi-Fi. The office does not have access points and cannot purchase any.

  Which of the following wireless network types best fulfills this requirement?

  A. Mesh
  B. Infrastructure
  C. Ad hoc
  D. Point-to-point
  C. Ad hoc

  ---

  Explanation

  An ad hoc wireless network allows devices to connect directly to each other without an access point. This is suitable for small, temporary setups like two laptops and a printer.

  Option A: Mesh requires multiple nodes forming a larger distributed network.

  Option B: Infrastructure requires an AP, which is not available here.

  Option D: Point-to-point is typically for long-distance wireless links between two fixed endpoints.

  References:

  Domain: Networking Concepts -- Wireless network types: infrastructure, ad hoc, mesh.

• Question 158:

  An organization wants to ensure that incoming emails were sent from a trusted source.

  Which of the following DNS records is used to verify the source?

  A. TXT
  B. AAAA
  C. CNAME
  D. MX
  A. TXT

  ---

  Explanation

  A TXT record can be used to store SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail) information, which help verify that an email has been sent from a trusted source.

• Question 159:

  Which of the following is a company most likely enacting if an accountant for the company can only see the financial department's shared folders?

  A. General Data Protection Regulation
  B. Least privilege network access
  C. Acceptable use policy
  D. End user license agreement
  B. Least privilege network access

  ---

  Explanation

  Least privilege network access is a principle that restricts users' access rights to only what is necessary for them to perform their job functions. In this case, the accountant's access is limited to only the financial department's shared folders, ensuring that they cannot access other parts of the network unnecessarily. This reduces the risk of unauthorized access and potential data breaches.

  References:

  CompTIA Network+ Exam Objectives and official study guides.

• Question 160:

  An attack on an internal server is traced to an isolated guest network.

  Which of the following best describes the attack?

  A. On-path
  B. DNS poisoning
  C. VLAN hopping
  D. ARP spoofing
  C. VLAN hopping

  ---

  Explanation

  The correct answer is VLAN hopping, which is a Layer 2 attack specifically associated with bypassing network segmentation controls. According to the CompTIA Network+ N10-009 objectives, VLANs are commonly used to isolate traffic between different network segments, such as separating a guest network from internal production systems. When an attack originates from an isolated guest network and successfully reaches an internal server, it strongly indicates a failure or exploitation of VLAN boundaries.

  VLAN hopping occurs when an attacker gains access to traffic on another VLAN by exploiting misconfigured switch ports or trunking protocols. Common techniques include switch spoofing, where the attacker pretends to be a switch to negotiate a trunk link, and double-tagging, where two VLAN tags are inserted to trick switches into forwarding traffic across VLANs.

  The other options do not best fit this scenario. An on-path (man-in-the-middle) attack requires interception between two communicating hosts but does not inherently bypass VLAN isolation. DNS poisoning manipulates name resolution, not network segmentation. ARP spoofing affects local Layer 2 address resolution within the same broadcast domain and typically cannot cross VLAN boundaries.

  The Network+ objectives emphasize proper VLAN configuration, disabling unused trunk ports, and implementing port security to prevent VLAN hopping attacks. In this case, VLAN hopping most accurately explains how a guest network could access internal servers.