CompTIA N10-009 Online Practice Questions and Exam Preparation

CompTIA N10-009 Online Questions & Answers

• Question 221:

  Which protocol centralizes authentication for network devices?

  A. SSO
  B. TACACS+
  C. Zero Trust
  D. MFA
  B. TACACS+

• Question 222:

  A network administrator wants to analyze attacks directed toward the company's network.

  Which of the following must be implemented?

  A. A honeypot
  B. Network segmentation
  C. Antivirus
  D. A screened subnet
  A. A honeypot

• Question 223:

  Users in a shared wireless space experience frequent disconnects.

  Which tool is BEST?

  A. Port scanner
  B. Protocol analyzer
  C. NetFlow
  D. Wi-Fi analyzer
  D. Wi-Fi analyzer

• Question 224:

  A company implements a video streaming solution that will play on all computers that have joined a particular group, but router ACLs are blocking the traffic.

  Which of the following is the most appropriate IP address that will be allowed in the ACL?

  A. 127.0.0.1
  B. 172.17.1.1
  C. 224.0.0.1
  D. 240.0.0.1
  C. 224.0.0.1

  ---

  Explanation

  224.0.0.1 is a multicast address that allows packets to be sent to all hosts within a multicast group. Since video streaming often uses multicast to efficiently distribute data to multiple clients without unnecessary duplication, this is the correct answer.

  Why not the other options? 127.0.0.1 (A) - This is the loopback address used for internal device testing, not for multicast traffic. 172.17.1.1 (B) - This is a private unicast address, meaning it can only send packets to one specific host. 240.0.0.1 (D) - This falls within the reserved experimental IP address range and is not used for multicast.

• Question 225:

  Which of the following should a network administrator configure when adding OT devices to an organization's architecture?

  A. Honeynet
  B. Data-at-rest encryption
  C. Time-based authentication
  D. Network segmentation
  D. Network segmentation

  ---

  Explanation

  Network segmentation involves dividing a network into smaller segments or subnets. This is particularly important when integrating OT (Operational Technology) devices to ensure that these devices are isolated from other parts of the network. Segmentation helps protect the OT devices from potential threats and minimizes the impact of any security incidents. It also helps manage traffic and improves overall network performance.

  References:

  CompTIA Network+ study materials.

• Question 226:

  Which of the following OSI model layers will ensure messages are transmitted to their destinations and no data is duplicated?

  A. Session
  B. Data link
  C. Network
  D. Transport
  D. Transport

  ---

  Explanation

  The transport layer is the fourth layer of the OSI model, and it is responsible for end-to-end delivery of data over a network. It uses standard protocols such as TCP, UDP, and DCCP to enhance its functionalities. One of the main functions of the transport layer is to ensure that messages are transmitted to their destinations reliably and in the correct order. It also prevents data duplication by using sequence numbers, acknowledgments, and retransmission mechanisms

• Question 227:

  Which of the following attack types floods a network with excessive traffic?

  A. Phishing
  B. DoS
  C. Spoofing
  D. Sniffing
  B. DoS

  ---

  Explanation

  A Denial-of-Service (DoS) attack overwhelms a network, server, or service with excessive traffic, rendering it unavailable to legitimate users. This type of attack consumes bandwidth, processing power, or memory resources. Phishing involves social engineering, spoofing involves impersonation, and sniffing involves capturing network traffic. DoS attacks directly impact availability, one of the core principles of information security.

• Question 228:

  A systems administrator is looking for operating system information, running services, and network ports that are available on a server.

  Which of the following software tools should the administrator use to accomplish this task?

  A. nslookup
  B. nmap
  C. traceroute
  D. netstat
  B. nmap

  ---

  Explanation

  To identify a server's available network ports running services,, and often operating system details, the best tool listed is nmap. In the Network+ (N10-009) toolset, nmap is a standard utility used for network discovery and security assessment, including port scanning (which TCP/UDP ports are open), service enumeration (what application/service is listening on those ports), and service/version detection. With the appropriate scan options and permissions, nmap can also provide OS fingerprinting, which estimates the server's operating system by analyzing responses to crafted packets.

  The other options do not meet all stated requirements. nslookup is used for DNS queries (name-to-IP and record lookups) and does not enumerate ports/services. traceroute (or tracert) maps the path packets take through the network to a destination and helps diagnose routing/latency issues, not services/ports. netstat shows local socket statistics on the host where it is executed (active connections, listening ports, and interface stats), but it does not reliably provide remote OS identification and is not a dedicated service/OS enumeration scanner like nmap.

  Therefore, nmap is the correct tool to accomplish the task as described.

• Question 229:

  Which of the following is the step that a troubleshooter should take immediately after implementing a solution?

  A. Review lessons learned during the process.
  B. Establish a plan of action.
  C. Verify full system functionality.
  D. Document actions and outcomes.
  C. Verify full system functionality.

• Question 230:

  Which of the following is required for hosts to receive DHCP addresses from a server that is located on a different subnet?

  A. DHCP scope
  B. DHCP snooping
  C. DHCP reservations
  D. DHCP relay
  D. DHCP relay

  ---

  Explanation

  A DHCP relay is a network device that forwards DHCP requests from clients on one subnet to a DHCP server on another subnet. This allows the DHCP server to assign IP addresses and other network configuration parameters to clients across different subnets. A DHCP scope is a range of IP addresses that a DHCP server can assign to clients. A DHCP snooping is a security feature that filters and validates DHCP messages on a switch. A DHCP reservation is a way to assign a specific IP address to a specific client based on its MAC address.

  References:

  Part 2 of the current page talks about DHCP relay and its functions. You can also find more information about DHCP relay on [this page].