CompTIA N10-009 Online Practice Questions and Exam Preparation

CompTIA N10-009 Online Questions & Answers

• Question 201:

  A user submits an escalated ticket regarding failed logins on their laptop. The user states that the time displayed on the laptop is incorrect. An administrator thinks the issue is related to the NTP.

  Which of the following should the administrator do next?

  A. Create a plan of action
  B. Implement a solution
  C. Identify the problem
  D. Test the theory
  C. Identify the problem

  ---

  Explanation

  The first step of troubleshooting is always to identify the problem, which includes verifying the symptoms (incorrect time), asking the user clarifying questions, and checking system logs. Only after confirming the problem can the administrator proceed to form a theory and plan.

  Option A: Plan of action is later.

  Option B: Implement solution comes after testing a theory.

  Option D: Test the theory requires a defined problem first.

• Question 202:

  Which of the following can also provide a security feature when implemented?

  A. NAT
  B. BGP
  C. FHRP
  D. EIGRP
  A. NAT

  ---

  Explanation

  NAT (Network Address Translation) helps hide internal IP addresses from external networks, adding a layer of security by preventing direct access to internal systems from the outside.

• Question 203:

  Which of the following physical security controls is designed to reveal unauthorized hardware access or tampering?

  A. Biometric authentication
  B. Media sanitization
  C. Change management
  D. Tamper-evident seals
  D. Tamper-evident seals

  ---

  Explanation

• Question 204:

  A government entity wants to implement technology that can block websites based on country code.

  Which of the following will best enable this requirement?

  A. URL filtering
  B. Content filtering
  C. DNS poisoning
  D. MAC filtering
  A. URL filtering

  ---

  Explanation

  URL filtering can block access to websites based on their domain or country code TLDs (e.g.,.cn,.ru). This is the correct method to block by location identifiers in URLs.

  Option B: Content filtering blocks based on keywords or categories within websites, not country code.

  Option C: DNS poisoning is an attack, not a control mechanism.

  Option D: MAC filtering restricts devices, not websites.

  References:

  Domain: Network Security -- Filtering technologies, URL vs content filtering.

• Question 205:

  A network engineer sees traffic going to 224.7.8.99.

  Which of the following describes this traffic type?

  A. Broadcast
  B. Unicast
  C. Multicast
  D. Anycast
  C. Multicast

  ---

  Explanation

  The answer is C. Multicast. The address 224.7.8.99 falls within the IPv4 Class D range, which is 224.0.0.0 through 239.255.255.255. That range is reserved for multicast traffic. Multicast is used when one sender needs to deliver traffic to a specific group of receivers rather than to every device on the network or to just one destination.

  That is what separates it from the other choices. Broadcast is intended for all hosts on the local broadcast domain. Unicast is one-to-one communication, where a single source sends traffic to one specific destination. Anycast is typically associated with sending traffic to the nearest or best member of a group that shares the same address, not to a multicast group address in the 224.0.0.0/4 range.

  From a Network+ point of view, this is a basic address-recognition question. Once you recognize that the destination begins with 224, the answer should immediately point to multicast. Protocols and streaming applications often use multicast when they need efficient delivery to multiple interested hosts without flooding every device. So in this case, the traffic type is clearly multicast.

• Question 206:

  Which of the following ports creates a secure connection to a directory service?

  A. 22
  B. 389
  C. 445
  D. 636
  D. 636

  ---

  Explanation

  LDAP (Lightweight Directory Access Protocol) uses port 389 for standard connections and port 636 for LDAP over SSL (LDAPS), which secures directory service communication.

  Breakdown of Options:

  Option A. 22-SSH port, not used for directory services.

  Option B. 389-Used for LDAP, but not encrypted.

  Option C. 445-Used for SMB file sharing not LDAP,.

  Option D. 636-Correct answer.LDAPS (LDAP over SSL/TLS) secures directory authentication.

• Question 207:

  A network technician is troubleshooting a connection to a web server. The technician is unable to ping the server but is able to verify connectivity to the web service using Telnet.

  Which of the following protocols is being blocked by the firewall?

  A. UDP
  B. ARP
  C. ICMP
  D. TCP
  C. ICMP

• Question 208:

  A network administrator suspects users are being sent to malware sites that are posing as legitimate sites. The network administrator investigates and discovers that user workstations are configured with incorrect DNS IP addresses.

  Which of the following should the network administrator implement to prevent this from happening again?

  A. Dynamic ARP inspection
  B. Access control lists
  C. DHCP snooping
  D. Port security
  C. DHCP snooping

  ---

  Explanation

  DHCP snooping is a security feature on network switches that helps to prevent unauthorized (rogue) DHCP servers from assigning IP addresses to clients. By implementing DHCP snooping, the network administrator can restrict DHCP responses to authorized servers only, preventing unauthorized DHCP configurations, such as incorrect DNS IPs, from being assigned to clients. This helps prevent man-in-the-middle attacks where malicious actors misconfigure DNS to redirect users to fraudulent sites. (Reference: CompTIA Network+ Study Guide, Chapter on Network Security)

• Question 209:

  A network administrator needs to assign IP addresses to a newly installed network. They choose 192.168.1.0 /24 as their network address and need to create three subnets with 30 hosts on each subnet.

  Which of the following is a valid subnet mask that will meet the requirements?

  A. 255.255.255.128
  B. 255.255.255.192
  C. 255.255.255.224
  D. 255.255.255.240
  B. 255.255.255.192

  ---

  Explanation

  To create three subnets with at least 30 hosts each:

  Subnet Calculation: Each subnet must support 32 addresses (30 usable + 2 reserved for network and broadcast).

  Bits for Subnets: Subnet mask 255.255.255.192 (/26) provides 64 addresses per subnet (4 subnets total).

  Valid Subnets: Each subnet provides sufficient IPs to meet the requirement. 255.255.255.128 (A): Creates only 2 subnets, not enough for the requirement. 255.255.255.224 (C): Provides 8 subnets but only 30 addresses per subnet (28 usable), insufficient for hosts.

  255.255.255.240 (D): Too restrictive, only 16 addresses per subnet (14 usable).

• Question 210:

  Which of the following protocols is used to resolve IP addresses to MAC addresses?

  A. DNS
  B. DHCP
  C. ARP
  D. SNMP
  C. ARP

  ---

  Explanation

  Address Resolution Protocol (ARP) is used to map an IP address to a corresponding MAC address within a local network. When a device wants to communicate with another device on the same subnet, it broadcasts an ARP request asking for the MAC address associated with a specific IP. The target device responds with its MAC address. DNS resolves domain names, DHCP assigns IP addresses, and SNMP is used for network management. ARP is essential for Layer 2 communication in IPv4 networks.