CompTIA N10-009 Online Practice Questions and Exam Preparation

CompTIA N10-009 Online Questions & Answers

• Question 181:

  Which of the following is the best example of a networking appliance that connects different network segments and directs allowed traffic between specific segments?

  A. Firewall
  B. IDS
  C. Unmanaged switch
  D. (Not provided)
  A. Firewall

  ---

  Explanation

  A firewall is the best example of an appliance that can sit between network segments and permit or deny traffic flows based on security policy. In Network+ terms, firewalls enforce segmentation controls by applying rules that match on items such as source/destination IP ports protocols,,, and (with next-generation firewalls) even applications. This makes a firewall a common choice for directing allowed traffic between specific segments (for example, allowing users in a workstation VLAN to reach only certain ports on a server VLAN, while blocking everything else). This function is core to network security architecture and is frequently paired with concepts like network segmentation ACL-style rule sets,, and

  creating security zones.

  An IDS (intrusion detection system) primarily monitors traffic and generates alerts on suspicious activity; it does not typically control or "direct allowed traffic" unless it is specifically an IPS (prevention) with inline blocking. An unmanaged switch operates at Layer 2 and forwards frames within a broadcast domain; it does not provide policy-based filtering between security segments. Therefore, the correct answer is Firewall.

• Question 182:

  Which of the following is a cost-effective advantage of a split-tunnel VPN?

  A. Web traffic is filtered through a web filter.
  B. More bandwidth is required on the company's internet connection.
  C. Monitoring detects insecure machines on the company's network.
  D. Cloud-based traffic flows outside of the company's network.
  D. Cloud-based traffic flows outside of the company's network.

  ---

  Explanation

  A split-tunnel VPN allows some traffic to be routed through the VPN while other traffic goes directly to the internet. This setup offers several advantages, with a primary one being cost-effectiveness due to cloud-based traffic not consuming company bandwidth.

  Bandwidth Utilization: Split-tunnel VPNs reduce the amount of traffic passing through the company's network, freeing up bandwidth for other uses.

  Performance: By allowing internet-bound traffic to bypass the VPN, it can reduce latency and improve the performance for users accessing cloud services directly.

  Cost Savings: Reduced load on the company's VPN infrastructure can lead to lower costs in terms of both hardware and bandwidth.

  References:

  CompTIA Network+ N10-007 Official Certification Guide: Covers VPN types, including split-tunnel configurations and their advantages.

  Cisco Networking Academy: Discusses VPN technologies and the benefits of split-tunneling.

  Network+ Certification All-in-One Exam Guide: Provides detailed information on VPN setups, including the cost-effectiveness of split-tunnel VPNs.

  By allowing cloud-based traffic to flow outside the company's network, a split-tunnel VPN optimizes resource usage and enhances the overall network performance without incurring extra costs for bandwidth.

• Question 183:

  An administrator is troubleshooting a Layer 3 communication issue between the web server and the database server.

  The administrator finds the following information:

  Device: Firewall

  IP Address: 192.168.1.1

  Subnet Mask: 255.255.255.0

  Gateway: 1.2.3.4

  Device: Web Server

  IP Address: 192.168.1.50

  Subnet Mask: 255.255.255.0

  Gateway: 192.168.1.1

  Device: Database Server

  IP Address: 192.168.1.201

  Subnet Mask: 255.255.255.128

  Which of the following corrects the communication issue?

  A. Changing the subnet on the database server to 255.255.255.0
  B. Changing the subnet on the firewall to 255.255.255.128
  C. Changing the default gateway on the database server to 1.2.3.4
  D. Changing the IP address on the database server to 192.168.1.150
  E. Changing the gateway on the firewall to 192.168.1.1
  A. Changing the subnet on the database server to 255.255.255.0

  ---

  Explanation

  The problem is a subnet mismatch. The web server is using 255.255.255.0, which places it in the 192.168.1.0/24 network. The database server is using 255.255.255.128, which places 192.168.1.201 in the 192.168.1.128/25 network. So even though both addresses begin with 192.168.1, the two systems are not treating the network boundaries the same way.

  That creates a Layer 3 communication issue because one host may believe the other device is local while the other host may treat traffic differently based on its smaller subnet. In a normal server segment like this, both systems should agree on the same mask if they are intended to be on the same network.

  Changing the database server's subnet mask to 255.255.255.0 fixes that inconsistency immediately. Then both servers and the firewall interface are using the same local network definition, and traffic can be handled properly. The other options do not solve the real issue. Changing the firewall to /25 would break consistency for the rest of the segment. Pointing the database server to 1.2.3.4 is incorrect because that is outside the local subnet and appears to be an upstream route. Changing the IP to 192.168.1.150 still leaves the wrong mask in place.

• Question 184:

  A network administrator is trying to troubleshoot an issue with a newly installed switch that is not connecting to the network. The administrator logs on to the switch and observes collisions on the interface.

  Which of the following is most likely the issue?

  A. Wrong speed
  B. Jumbo frames enabled
  C. Incorrect VLAN
  D. Duplex mismatch
  D. Duplex mismatch

  ---

  Explanation

  The most likely issue is a duplex mismatch, which is a well-documented cause of collisions and poor network performance, as outlined in the CompTIA Network+ N10-009 troubleshooting objectives. A duplex mismatch occurs when one end of a network link is configured for full duplex while the other end is operating in half duplex. In half-duplex mode, devices must take turns transmitting and receiving data, which inherently allows for collisions. When paired with a full-duplex device-which expects simultaneous send and receive-collisions and retransmissions occur frequently.

  The presence of collisions on a switch interface is a key diagnostic clue. Modern Ethernet switches operating correctly in full duplex should not experience collisions at all. When collisions are observed, it almost always points to a duplex configuration issue, often caused by manual speed/duplex settings on one device and auto-negotiation on the other.

  A wrong speed setting may prevent link establishment entirely or cause errors, but it does not typically result in collisions. Jumbo frames can cause packet drops or fragmentation issues, not collisions. An incorrect VLAN configuration affects logical segmentation and connectivity but operates at Layer 2 and does not generate collisions.

  CompTIA Network+ emphasizes duplex mismatch as a classic and frequently tested troubleshooting scenario. Correcting it-usually by enabling auto-negotiation on both ends-restores normal, collision-free communication.

• Question 185:

  Which of the following are environmental factors that should be considered when installing equipment in a building? (Select two).

  A. Fire suppression system
  B. UPS location
  C. Humidity control
  D. Power load
  E. Floor construction type
  F. Proximity to nearest MDF
  A. Fire suppression system
  C. Humidity control

  ---

  Explanation

  When installing equipment in a building, environmental factors are critical to ensure the safety and longevity of the equipment. A fire suppression system is essential to protect the equipment from fire hazards. Humidity control is crucial to prevent moisture-related damage, such as corrosion and short circuits, which can adversely affect electronic components. Both factors are vital for maintaining an optimal environment for networking equipment.

  References:

  CompTIA Network + study materials.

• Question 186:

  Which of the following is the best use case of a site-to-site VPN?

  A. Securing access across an untrusted network
  B. Encrypting data at rest
  C. Filtering traffic between two internal subnets
  D. Hosting public-facing applications that contain company resources
  A. Securing access across an untrusted network

  ---

  Explanation

  A site-to-site VPN is used to securely connect two networks over an untrusted network, most commonly the public internet. In Network+ (N10-009) objectives, VPNs are described as providing confidentiality and integrity for data in transit by creating an encrypted tunnel between sites (for example, headquarters and a branch office). This allows systems at both locations to communicate as if on the same private WAN, while preventing eavesdropping or tampering by intermediate networks. Typical implementations use IPsec tunneling and rely on negotiated encryption/authentication parameters to protect traffic end-to-end between VPN gateways.

  Encrypting data at rest refers to storage encryption (disk/database), not VPN tunneling. Filtering traffic between two internal subnets is usually handled by ACLs, firewalls, or segmentation controls, not a site-to-site VPN. Hosting public-facing applications is a DMZ / reverse proxy / WAF design concern; a VPN is not the primary control for exposing public services (and generally you would not require the public to use a VPN to reach a public website). Therefore, securing site connectivity across an untrusted network is the best match.

• Question 187:

  A network administrator notices interference with industrial equipment in the 2.4GHz range.

  Which of the following technologies would most likely mitigate this issue? (Select two).

  A. Mesh network
  B. 5GHz frequency
  C. Omnidirectional antenna
  D. Non-overlapping channel
  E. Captive portal
  F. Ad hoc network
  B. 5GHz frequency
  D. Non-overlapping channel

  ---

  Explanation

  Switching to the 5GHz frequency can reduce interference because it operates on a different range, thus avoiding the crowded 2.4GHz spectrum. Using non-overlapping channels within the 2.4GHz frequency can help minimize interference by ensuring that the network uses a clear channel that does not overlap with others, reducing the chance of congestion and interference.

• Question 188:

  Which of the following allows a user to connect to an isolated device on a stand-alone network?

  A. Jump box
  B. API gateway
  C. Secure Shell (SSH)
  D. Clientless VPN
  A. Jump box

  ---

  Explanation

  A jump box is a hardened system that provides secure access to isolated or sensitive devices on a separate network.

  Breakdown of Options:

  Option A. Jump box-Correct answer. Acts as a middle point for secure remote access.

  Option B. API gateway-Used for managing API calls not remote access to isolated devices.

  Option C. Secure Shell (SSH)-Requires direct connectivity, which may not be available for an isolated device.

  Option D. Clientless VPN-Allows web-based VPN access, but does not guarantee access to isolated devices.

• Question 189:

  Employees report that the network is slow. The network engineer thinks the performance issue is with an upstream router.

  Which of the following tools should the engineer use to determine the location of the issue?

  A. nslookup and dig
  B. Nmap and speed tester
  C. tracert and ping
  D. tcpdump and protocol analyzer
  C. tracert and ping

  ---

  Explanation

  To determine where slowness is occurring-especially if an upstream router is suspected-the best tools are ping and tracert/traceroute. Network+ (N10-009) troubleshooting objectives emphasize using these to test connectivity, latency, and the path packets take through the network. Ping measures reachability and round-trip time; rising latency or packet loss can indicate congestion or a failing link/device. Tracert identifies each hop along the route and reports per-hop response times, helping pinpoint whether delays begin at a specific hop (for example, the default gateway, the upstream router, or a provider edge). This allows the engineer to localize the problem area and decide whether the issue is internal, at the upstream router, or beyond.

  nslookup and dig are DNS tools; they diagnose name resolution, not general network slowness location. Nmap focuses on scanning ports/hosts, and a "speed tester" measures throughput but does not locate the failing hop. tcpdump and protocol analyzer can reveal retransmissions, windowing, or application behavior, but they are not the fastest first-choice tools for locating an upstream routing/performance bottleneck across hops. Hence, tracert and ping are the correct pair.

• Question 190:

  Which of the following diagrams would most likely include specifications about fiber connector types?

  A. Logical
  B. Physical
  C. Rack
  D. Routing
  B. Physical

  ---

  Explanation

  A physical diagram is a type of diagram that shows the physical layout and connections of the network devices and components, such as routers, switches, cables, and connectors. A physical diagram may include specifications about the fiber connector types, such as LC, SC, FC, ST, MPO, etc., that are used to link the fiber optic cables and devices. A physical diagram can help to visualize the network topology, troubleshoot network problems, and plan network changes